Full Disclosure mailing list archives
Re: Response to comments on Security and Obscurity
From: Valdis.Kletnieks () vt edu
Date: Thu, 02 Sep 2004 10:38:48 -0400
On Wed, 01 Sep 2004 15:03:03 EDT, "Clairmont, Jan M" said:
The Clairmont-Everhardt Index of potential Security vulnerability being equal to the (Number of Computers)! * (Number of People using the systems)! * (Number of Ports)! * (the Lines of Code)! * (The number of Applications)! * (Number of Routers/Hubs)! and any other factors you wish to include.
Given the "any other factors" clause, I won't ask what mathematically rigorous reason there is to suspect that the factorial function is the proper one to use. :) For starters, although our network has well over 2,000 routers/switches/access points, the number that are directly impacting the security of the computer I'm typing on is down in the several dozen range. Similarly, one could make the case that it should be "(number of computers)" and "(*AVERAGE* number of people per system)" or a product of "number of users" times "number of systems each user has access to". And so on....
Attachment:
_bin
Description:
Current thread:
- RE: Response to comments on Security and Obscurity Clairmont, Jan M (Sep 01)
- Re: Response to comments on Security and Obscurity Valdis . Kletnieks (Sep 02)
- <Possible follow-ups>
- RE: Response to comments on Security and Obscurity yaakov yehudi (Sep 02)
- Re: Response to comments on Security and Obscurity Barry Fitzgerald (Sep 02)
- Re: Response to comments on Security and Obscurity James Tucker (Sep 02)
- Security & Obscurity: physical-world analogies Peter Swire (Sep 02)
- Re: Security & Obscurity: physical-world analogies Dave Aitel (Sep 02)
- Re: Security & Obscurity: physical-world analogies Frank Knobbe (Sep 02)
- Re: Re: Security & Obscurity: physical-world analogies James Tucker (Sep 02)
- Re: Re: Security & Obscurity: physical-world analogies Frank Knobbe (Sep 02)
- Re: Re: Re: Security & Obscurity: physical-world analogies James Tucker (Sep 02)
- Re: Response to comments on Security and Obscurity Barry Fitzgerald (Sep 02)
- Re: Security & Obscurity: physical-world analogies gadgeteer (Sep 03)